<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoPlainText">Here are the last few lines in the error.log file:<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif">[2017-09-22 13:20:07] DBUG stats/modify_node_event update global connections (21)<br>
[2017-09-22 13:20:11] DBUG stats/modify_node_event update "/wcpn" total_bytes_read (42454353)<br>
[2017-09-22 13:20:11] DBUG stats/modify_node_event update "/wcpn" total_bytes_sent (4642577)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><img width="1" height="1" style="width:.0104in;height:.0104in" id="Picture_x0020_1" src="cid:image001.gif@01D333A6.A2F26A60" alt="https://ssl.gstatic.com/ui/v1/icons/mail/images/cleardot.gif"></span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><o:p></o:p></span></p>
<p class="MsoPlainText">And here are the few lines of the access log:<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">10.9.1.112 - - [22/Sep/2017:12:36:33 -0400] "GET /tunein.png HTTP/1.1" 200 1934 "http://audio2.ideastream.org:443/style.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
0<o:p></o:p></p>
<p class="MsoPlainText">10.9.1.112 - - [22/Sep/2017:12:36:41 -0400] "GET /wcpn HTTP/1.1" 200 68979 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 1<o:p></o:p></p>
<p class="MsoPlainText">10.9.1.112 - - [22/Sep/2017:12:41:53 -0400] "GET /wcpn HTTP/1.1" 200 4522571 "http://audio2.ideastream.org:443/wcpn" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
313<o:p></o:p></p>
<p class="MsoPlainText">52.71.155.178 - - [22/Sep/2017:13:08:10 -0400] "GET /wcpn HTTP/1.1" 200 51027 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.1.25 (KHTML, like Gecko) Version/8.0 Safari/600.1.25" 0<o:p></o:p></p>
<p class="MsoPlainText">66.249.88.82 - - [22/Sep/2017:13:21:10 -0400] "GET / HTTP/1.1" 200 2418 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon" 0<o:p></o:p></p>
<p class="MsoPlainText">66.249.88.84 - - [22/Sep/2017:13:21:10 -0400] "GET /favicon.ico HTTP/1.1" 404 365 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon" 0<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">I am 10.9.1.112. I don’t see the same message and the connections in the error log are all from me attempting to connect using https.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">I attempted to connect using https and the error log shows bytes sent. And the access.log shows different connections.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">-----Original Message-----<br>
From: José Luis Artuch [mailto:artuch@speedy.com.ar] <br>
Sent: Friday, September 22, 2017 1:15 PM<br>
To: Icecast streaming server user discussions <icecast@xiph.org><br>
Cc: Zernick, John <John.Zernick@ideastream.org><br>
Subject: Re: [Icecast] Having icecast SSL connection problem</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Hi John,<o:p></o:p></p>
<p class="MsoPlainText">El vie, 22-09-2017 a las 16:50 +0000, Zernick, John escribió:<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> I have been trying to get icecast 2.4.2 to stream with ssl to https.<o:p></o:p></p>
<p class="MsoPlainText">> But so far I have had no luck.<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> I am running Ubuntu 16.04 and the regular stream is working properly
<o:p></o:p></p>
<p class="MsoPlainText">> over port 80. I want to stream securely over port 443. I need to use<o:p></o:p></p>
<p class="MsoPlainText">> 443 because of network rules here. I can view the Icecast2 Status
<o:p></o:p></p>
<p class="MsoPlainText">> pages and listen to a stream, but once I add https:// I get 'Secure
<o:p></o:p></p>
<p class="MsoPlainText">> Connection Failed' on Firefox and 'This site can’t be reached' from
<o:p></o:p></p>
<p class="MsoPlainText">> Chrome. Both can view and stream non-ssl content.<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> I have tried both a Digicert and a self-signed cert. I have followed
<o:p></o:p></p>
<p class="MsoPlainText">> the pem rules from Digicert. I have set the permissions to the user<o:p></o:p></p>
<p class="MsoPlainText">> Icecast2 from the group Icecast. I have read almost everything on this
<o:p></o:p></p>
<p class="MsoPlainText">> and I have tried Walter York's instructions to pre-install a number of
<o:p></o:p></p>
<p class="MsoPlainText">> packages that icecast needs to successfully enable ssl. I have placed
<o:p></o:p></p>
<p class="MsoPlainText">> the cert files in the same directory as the icecast.xml file. Here are
<o:p></o:p></p>
<p class="MsoPlainText">> the details regarding the ssl portions of the XML config file.<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> ...<o:p></o:p></p>
<p class="MsoPlainText">> <!-- You may have multiple <listener> elements --><o:p></o:p></p>
<p class="MsoPlainText">> <listen-socket><o:p></o:p></p>
<p class="MsoPlainText">> <port>80</port><o:p></o:p></p>
<p class="MsoPlainText">> <!-- <shoutcast-mount>/stream</shoutcast-mount> --><o:p></o:p></p>
<p class="MsoPlainText">> </listen-socket><o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <listen-socket><o:p></o:p></p>
<p class="MsoPlainText">> <port>443</port><o:p></o:p></p>
<p class="MsoPlainText">> <ssl>1</ssl><o:p></o:p></p>
<p class="MsoPlainText">> </listen-socket><o:p></o:p></p>
<p class="MsoPlainText">> ...<o:p></o:p></p>
<p class="MsoPlainText">> <paths><o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <!-- The certificate file needs to contain both public and
<o:p></o:p></p>
<p class="MsoPlainText">> private part.<o:p></o:p></p>
<p class="MsoPlainText">> Both should be PEM encoded. --><o:p></o:p></p>
<p class="MsoPlainText">> <ssl-certificate>/etc/icecast2/icecast2_new.pem</ssl-<o:p></o:p></p>
<p class="MsoPlainText">> certificate><o:p></o:p></p>
<p class="MsoPlainText">> ...<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> So, there you have it. The only anomaly with the set up was that when
<o:p></o:p></p>
<p class="MsoPlainText">> the VMWare instance of the site started it was running dhcp and I
<o:p></o:p></p>
<p class="MsoPlainText">> struggled to wrestle control away from it. And I was never able to get
<o:p></o:p></p>
<p class="MsoPlainText">> eth0 to work so I used same interface name that dhcp used 'ens160'.<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> Any and all suggestions, recommendation, ideas, and solutions would be
<o:p></o:p></p>
<p class="MsoPlainText">> greatly appreciated.<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">Take a look at /var/log/icecast2/error.log In my case it says something like:<o:p></o:p></p>
<p class="MsoPlainText">[2017-09-17 11:40:43] INFO connection/get_ssl_certificate No SSL capability Then, I interpret that Icecast2 is not compiled with SSl support.<o:p></o:p></p>
<p class="MsoPlainText">Regards.<o:p></o:p></p>
<p class="MsoPlainText">José Luis<o:p></o:p></p>
<p class="MsoPlainText">> Thanks, --John<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> John Zernick | Senior Systems Administrator (Web)| D: (216) 916-6472<o:p></o:p></p>
<p class="MsoPlainText">> | F: (216) 916-6473<o:p></o:p></p>
<p class="MsoPlainText">> Idea Center | 1375 Euclid | Cleveland OH 44115<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> The mission of ideastream is to strengthen our communities<o:p></o:p></p>
<p class="MsoPlainText">> Follow us on Facebook and Twitter<o:p></o:p></p>
<p class="MsoPlainText">> Explore what you love, discover even more at ideastream.org<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> _______________________________________________<o:p></o:p></p>
<p class="MsoPlainText">> Icecast mailing list<o:p></o:p></p>
<p class="MsoPlainText">> <a href="mailto:Icecast@xiph.org"><span style="color:windowtext;text-decoration:none">Icecast@xiph.org</span></a><o:p></o:p></p>
<p class="MsoPlainText">> <a href="http://lists.xiph.org/mailman/listinfo/icecast">
<span style="color:windowtext;text-decoration:none">http://lists.xiph.org/mailman/listinfo/icecast</span></a><o:p></o:p></p>
</div>
</body>
</html>